
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588335524839425/1/E3993DB092F827CDCF711046B493411A00A72701.mft
File: E3993DB092F827CDCF711046B493411A00A72701.mft (raw, json)
Hash identifier: Elyx8m9wUR1EbjPq5fPIN2UuNmvKQjIP+mcJ10mqwc4=
Subject key identifier: 54:FF:81:84:17:7B:39:CE:84:9B:D7:C8:2D:2A:5C:68:03:E6:CF:60
Authority key identifier: E3:99:3D:B0:92:F8:27:CD:CF:71:10:46:B4:93:41:1A:00:A7:27:01
Certificate issuer: /CN=E3993DB092F827CDCF711046B493411A00A72701
Certificate serial: 387608CC534ECB35221C820BE19213263F0BEADB
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/E3993DB092F827CDCF711046B493411A00A72701.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588335524839425/1/E3993DB092F827CDCF711046B493411A00A72701.mft
Manifest number: C4
Signing time: Sat 13 Jun 2026 12:36:49 +0000
Manifest this update: Sat 13 Jun 2026 12:31:49 +0000
Manifest next update: Sun 14 Jun 2026 12:59:49 +0000
Files and hashes: 1: 3133382e3235322e37332e302f32342d3234203d3e20313337373331.roa (hash: BYAXVTxfgLWzT4RgbXwqdG0dnJo1tFwF8NnGu6h4glA=)
2: 3133382e3235322e37322e302f32342d3234203d3e20313337373331.roa (hash: UQKPf2S3sGHCJlse2YLd/IC42+k7YICa9NGSQPIobpw=)
3: E3993DB092F827CDCF711046B493411A00A72701.crl (hash: o3PiKWDYfwgTcqwNwOTepwnGxe4AUvWvJlls+mGLC08=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588335524839425/1/E3993DB092F827CDCF711046B493411A00A72701.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588335524839425/1/E3993DB092F827CDCF711046B493411A00A72701.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/E3993DB092F827CDCF711046B493411A00A72701.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 12:59:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:76:08:cc:53:4e:cb:35:22:1c:82:0b:e1:92:13:26:3f:0b:ea:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E3993DB092F827CDCF711046B493411A00A72701
Validity
Not Before: Jun 13 12:31:49 2026 GMT
Not After : Jun 14 12:59:49 2026 GMT
Subject: CN=54FF8184177B39CE849BD7C82D2A5C6803E6CF60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:1b:d9:ad:e2:6f:4e:05:7b:d4:54:4b:73:7e:
a1:0d:3f:3b:e1:50:aa:59:5a:de:17:b9:00:48:3d:
96:ff:b4:de:11:cc:36:f2:8f:cc:fa:33:a3:26:26:
3b:e2:0f:b7:cf:26:dc:73:05:b6:00:2e:a8:b6:12:
1e:32:99:80:f0:08:38:97:3f:be:60:c3:be:29:ea:
1d:a7:fd:b5:60:a1:4b:fb:94:24:99:b9:7d:ad:2f:
36:79:52:68:01:1c:be:47:e9:14:97:77:93:93:6b:
1e:2d:da:17:48:38:bc:74:11:e6:80:88:b1:9e:75:
a6:71:1a:02:76:42:79:04:92:20:d6:56:d9:05:86:
ef:bc:53:7f:09:29:64:56:e8:7a:94:ab:c8:0b:9b:
13:4f:30:2d:78:5d:20:a1:3d:47:4f:91:39:b5:74:
82:77:71:e6:b5:9c:9b:aa:cc:28:18:14:00:91:33:
3a:76:bb:71:3f:4d:64:ca:17:31:4f:3d:e4:e7:40:
0a:11:2e:f7:66:7d:a5:bc:b5:00:cf:3a:c6:15:0a:
59:bf:42:49:aa:d0:66:72:4d:77:c9:9b:b5:94:7e:
ec:23:a5:b6:9e:ab:67:94:79:50:00:55:c7:38:e0:
a2:0d:6a:79:3a:96:31:c5:41:e4:eb:52:1e:88:31:
38:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:FF:81:84:17:7B:39:CE:84:9B:D7:C8:2D:2A:5C:68:03:E6:CF:60
X509v3 Authority Key Identifier:
keyid:E3:99:3D:B0:92:F8:27:CD:CF:71:10:46:B4:93:41:1A:00:A7:27:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524839425/1/E3993DB092F827CDCF711046B493411A00A72701.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/E3993DB092F827CDCF711046B493411A00A72701.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524839425/1/E3993DB092F827CDCF711046B493411A00A72701.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:df:7e:e5:b7:95:f3:ea:3d:b9:7a:3e:59:7f:51:48:ed:95:
32:5b:00:2b:c1:73:9a:42:f7:ba:6a:83:30:8e:98:12:50:ea:
dd:20:85:f7:4f:01:19:26:3e:ec:20:a8:93:9f:ec:a8:3d:dd:
69:0c:34:ce:59:87:bf:f0:8d:3f:38:5c:d7:6c:71:e4:4e:1a:
a6:ae:df:8e:68:fa:ec:f4:e5:d7:3c:b6:01:ad:1c:54:b8:77:
26:15:87:22:c7:e6:ef:5e:20:fd:3c:1a:93:0c:91:d5:ed:58:
11:5d:cf:ea:88:70:fa:33:f2:09:91:e5:b4:f4:fa:7c:93:da:
6e:16:e7:ea:58:90:ec:ea:b1:9a:9a:5f:68:58:bc:78:c7:91:
46:4a:0a:a7:f6:69:98:c0:ba:f6:17:6e:2f:1b:93:08:4d:32:
05:7a:3f:9b:51:ac:b0:0f:d5:02:7e:d6:4a:e5:17:b9:49:ea:
5d:8c:c5:0d:52:79:5c:e6:4d:13:c1:de:88:7b:cf:df:db:73:
1d:d5:12:e4:e2:af:6c:40:25:f9:ca:8f:cd:b7:3a:b5:83:93:
59:e9:83:a4:60:ed:6e:e4:c6:9c:85:7d:2e:0d:32:c8:e3:8d:
4f:85:2c:ac:0c:47:72:06:21:da:e1:8b:db:6e:26:6c:fa:95:
a8:7a:fe:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:22:59 2026 by rpki-client